Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b2781bf2-f163-3474-a4dd-cbf53f3e6317.roa
File:                     b2781bf2-f163-3474-a4dd-cbf53f3e6317.roa (raw, json)
Hash identifier:          3PUIZ9xNbBdkLZz+95eTS5w68FrrJalqD5vfsZ+zb1Y=
Subject key identifier:   72:11:86:34:08:D2:83:AA:D2:88:81:19:CC:61:F9:37:FE:08:AF:55
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D5A243BDDE5D01EEE81FD26D0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b2781bf2-f163-3474-a4dd-cbf53f3e6317.roa
Signing time:             Tue 31 Mar 2026 14:57:20 +0000
ROA not before:           Tue 31 Mar 2026 14:57:20 +0000
ROA not after:            Mon 29 Jun 2026 14:57:20 +0000
asID:                     25485
IP address blocks:        192.31.80.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5a:24:3b:dd:e5:d0:1e:ee:81:fd:26:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 31 14:57:20 2026 GMT
            Not After : Jun 29 14:57:20 2026 GMT
        Subject: CN=ea3ea771-881d-4b63-8ab3-9318e1942702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:01:91:a7:29:eb:56:74:ea:31:b5:51:a0:cc:
                    9f:c9:7b:0e:c7:18:2e:8f:30:f4:29:68:01:e6:cd:
                    86:45:4a:25:7a:58:56:21:03:8a:b8:cb:fb:b1:19:
                    cb:ce:56:62:79:81:05:93:90:6d:6f:e4:46:a5:bd:
                    86:20:14:67:5a:ca:50:0f:ea:05:1e:c4:34:49:51:
                    15:f8:2f:16:1b:ac:02:4e:8b:cf:13:c7:39:8c:f8:
                    e6:b8:bc:6e:17:db:3b:d6:f1:33:1c:13:0c:c2:2e:
                    96:32:eb:cc:23:90:c4:05:84:ac:cc:ea:ba:dc:1e:
                    00:ac:93:61:5d:e8:18:b1:df:33:4e:f7:7b:87:39:
                    32:d2:19:3f:22:66:1f:5d:03:c3:50:3e:fa:a4:1a:
                    ab:a7:70:ee:83:de:16:4f:17:62:5c:c3:dd:3c:de:
                    30:19:f0:eb:02:86:c8:4b:37:71:cb:c6:43:52:b0:
                    51:f6:df:99:a1:be:67:f8:9e:9a:73:92:50:f4:ab:
                    22:98:76:0c:b1:aa:12:34:b6:82:17:06:e5:77:3c:
                    db:cf:c4:a7:cf:00:32:1f:7e:ca:29:8b:56:8b:d6:
                    51:7c:8c:46:bd:7d:d6:de:c0:b2:e0:d3:f2:c7:64:
                    86:79:98:13:06:9f:c8:83:94:ae:37:38:b2:cd:50:
                    c0:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:11:86:34:08:D2:83:AA:D2:88:81:19:CC:61:F9:37:FE:08:AF:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b2781bf2-f163-3474-a4dd-cbf53f3e6317.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.31.80.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:23:d9:28:ca:b6:f5:6e:d2:48:7e:9b:d6:9e:c3:25:1e:93:
         68:19:ba:75:ca:80:4d:ae:9d:a1:50:c1:fd:59:01:ac:15:ea:
         bd:8f:ac:c8:0b:bc:75:98:3d:d4:19:53:b9:ba:06:18:ff:23:
         d0:9a:20:2c:f0:36:01:f0:6d:10:c8:e9:54:07:30:ee:d8:96:
         9a:53:00:5d:f6:59:8e:df:49:3f:1b:79:b9:22:c1:fe:a8:36:
         77:99:23:31:ca:f4:5a:66:8d:1d:d2:1b:82:70:8d:6b:e7:24:
         bc:2d:97:e2:a7:fc:09:c4:20:41:f5:f8:63:da:9f:23:fb:bd:
         f4:c4:38:1a:b1:e8:db:a0:9f:71:07:1d:95:c6:8d:2f:57:fe:
         c0:3a:ab:6f:60:fd:77:5e:64:24:0e:7b:7a:6d:62:34:e0:24:
         85:78:b7:7c:c9:63:b1:d8:7b:ef:74:d1:1b:d9:3f:a3:6f:70:
         eb:eb:09:79:e5:c9:f3:06:18:94:95:f1:a1:fa:15:c3:c1:fd:
         7f:31:67:c0:67:24:74:46:0f:a6:90:47:7e:ce:cd:7f:46:e4:
         84:16:20:c0:0a:77:c9:56:9f:3e:e6:59:0e:05:1d:4d:47:09:
         ef:46:80:dc:7e:0c:81:16:9d:97:39:cd:99:ac:97:61:9e:2a:
         7a:0e:e6:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:01:52 2026 by rpki-client